This is unreleased documentation for Runtime Enforcer 0.9-dev.

Runtime-Enforcer Uninstall

You can remove the Runtime-Enforcer and all the policies created by uninstalling the helm chart as follows:

helm uninstall runtime-enforcer --namespace runtime-enforcer

Note that this command won’t delete the existing WorkloadPolicy and WorkloadPolicyProposal.

To remove them, you can run the following commands:

kubectl delete crd workloadpolicies.security.rancher.io
kubectl delete crd workloadpolicyproposals.security.rancher.io

Deletion of a WorkloadPolicy will fail while at least one pod is still referencing it. Remove the pod(s) first, then delete the policy.

Finally, delete the namespace where Runtime-Enforcer was deployed:

kubectl delete ns runtime-enforcer

You can also delete the cert-manager:

helm uninstall cert-manager --namespace cert-manager
kubectl delete ns cert-manager